Product Security Engineer (Remote)

About the role

We are looking for a Product Security Engineer to lead hands‑on static application security testing (SAST) triage for our global product portfolio. The role is fully remote and focuses on analysing findings, tracing data flow through code, and making evidence‑based decisions that drive risk remediation.

Key responsibilities

• Perform daily SAST triage, reviewing and validating findings from static analysis tools.
• Conduct source‑to‑sink data‑flow analysis and secure code reviews across multiple codebases.
• Document disposition of findings with audit‑traceable evidence in regulated environments.
• Fine‑tune SAST tools to reduce false‑positive rates and improve detection coverage.
• Collaborate with engineering teams to verify and guide remediation of confirmed vulnerabilities.

Required profile

• 5+ years of experience in product security, application security, or software engineering with a strong hands‑on security focus.
• Proven track record of performing SAST triage rather than just tool integration.
• Ability to produce clear, compliance‑driven documentation of vulnerability dispositions.
• Advanced proficiency in English.

Required skills

• Experience with SAST tools such as Checkmarx, Fortify, Veracode or Coverity at the findings level.
• Strong source‑to‑sink data‑flow analysis and secure code review capabilities.
• Hands‑on expertise in static analysis (SAST) processes.

What we offer

• 100 % remote work from any location.
• Competitive compensation paid in USD or local currency.
• Provided hardware and software for a home office.
• Flexible schedule and paid parental leave, vacations and holidays.
• Mentorship, career development and growth within a multicultural, top‑talent environment.